PCCSE Exam QuestionsBrowse all questions from this exam

PCCSE Exam - Question 5


A customer has a requirement to terminate any Container from image topSecret:latest when a process named ransomWare is executed.

How should the administrator configure Prisma Cloud Compute to satisfy this requirement?

Show Answer
Correct Answer: D

To meet the requirement of terminating any container from the image topSecret:latest when the ransomWare process is executed, the administrator should choose the option that ensures the entire container is stopped if the process violates the policy. The correct approach involves adding a ransomWare process to the denied process list and setting the action to 'block', as this action will terminate the entire container, not just the offending process.

Discussion

8 comments
Sign in to comment
[Removed]Option: D
Sep 11, 2021

Correct answer is D. Block terminate container. Prevent only terminate process.

Phoennix
Aug 12, 2022

Bro have you given this exam ? Did you passed ? Any link for Dump and study

NodummyIQOption: C
Feb 3, 2023

Option C is the correct answer. The administrator should add a new runtime policy targeted at a specific Container name, add the ransomWare process into the denied process list, and set the action to "prevent". This will prevent the ransomWare process from being executed in the Container image topSecret:latest.

Shivam_ayirOption: D
Mar 21, 2023

D is the right option. Prevent only blocks containers from running processes, whereas the requirment is to terminate the container, which is only possible by Block. https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/runtime_defense/runtime_defense_containers

kumar_57Option: D
Mar 23, 2023

The correct option is D because 'prevent' just tells you that operation is not permitted but on enabling 'block', it will terminate your container.

SpippoloOption: D
Jun 6, 2023

D. Block terminate container

steven_xie2Option: D
Nov 3, 2023

Correct answer is D

JohnOrtizOption: D
May 20, 2024

Option D is the correct answer

elzmOption: D
Jul 6, 2024

Prevent  — Defender stops the process (and just the process) that violates your policy from executing. Block  — Defender stops the entire container if a process that violates your policy attempts to run. D. https://docs.prismacloud.io/en/classic/compute-admin-guide/runtime-defense/runtime-defense-containers#effect